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A METHOD AND SYSTEM FOR PROVIDING PROTECTION 
AGAINST THEFT AND LOSS OF A PORTABLE COMPUTER SYSTEM 

FIELD OF THE INVENTION 

The present invention relates to portable computer systems, and more particularly 
to providing protection against theft for portable computer systems. 

BACKGROUND OF THE INVENTION 

Advancing technology has created smaller and lighter components that are readily 
utilized in portable computer systems. The ability to have fuU computing power in a 
lightweight and convenient size makes portable computers attractive to many users. For 
example, portable computers are increasingly popular among travelers and telecommuters. 

With their mobile nature and popularity, portable computer systems remam at high 
risk for theft. While the utilization of a system password provides some means of 
controlling access to portable systems, the loss of the system can be quite costly, including 
costs associated with recoupmg data and reconfiguring a new system. Thus, a need exists 
for improved security capabilities for portable computer systems that provide protection 
against theft and loss of a portable computer system. 
The present invention addresses such needs. 



SUMMARY OF THE INVENTION 

The present invention provides system and method aspects for providing protection 
against theft and loss of a portable computer system. The present invention includes 
establishing boundary conditions within which the portable computer system is authorized 
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for use and tracking a position of the portable computer system with a global position 
system (GPS) unit in the portable computer system. The position is compared to the 
boundary conditions to identify whether the portable computer system has violated the 
boundary conditions, and anti-theft routines are performed when the position has violated 
the boundary conditions. The anti-theft routines include calling a preset phone number 
with a cellular calling facility of the portable computer system. 

Through the present invention, improved security for portable computer systems is 
achieved. The present invention provides efficient and effective mechanisms for locating 
and recovering a lost/stolen portable computer system. These and other advantages of the 
aspects of the present invention will be more fiiUy understood in conjunction with the 
following detailed description and accompanying drawings. 

BRIEF DESCRIPTION OF THE DRAWINGS 

Figure 1 illustrates a representation of a portable computer system in accordance 
with the present invention. 

Figure 2 illustrates a schematic diagram of the portable computer system of Figure 

1. 

Figure 3 illustrates a schematic diagram of a COM control unit of Figure 2 in more 

detail. 

Figure 4 illustrates a flow diagram for establishing preset boundary conditions in 
accordance with the present invention. 

Figures 5 and 6 illustrate flow diagrams for performing a boundary check in 
accordance with the present invention. 

RP999005/I250P -2- 





DETAILED DESCRIPTION 

The present invention relates to security mechanisms in a portable computer 
system. The following description is presented to enable one of ordinary skill in the art to 
make and use the invention and is provided in the context of a patent application and its 
requirements. Various modifications to the preferred embodiment and the generic 
principles and features described herein will be readily apparent to those skilled in the art. 

Figure 1 depicts a pictorial representation of a portable computer in accordance 
with the method and system of the present mvention. Portable computer 30 may be 
implemented utilizing any portable computer configured as described below and capable of 
being coupled to a docking station (not shown), e.g., as an ThinkPad portable computer 
available from IBM Corporation of Armonk, NY. Portable computer 30 includes a 
keyboard 32, a display 34, and other components, as described in more detail with 
reference to Figure 2. 

Figure 2 depicts a high-level schematic diagram of the portable computer of Figure 
1 in accordance with the present invention. A central processing unit (CPU) 200 is 
connected by address, control, and data busses 202 to a memory controller and peripheral 
component interconnect (PCI) bus bridge 204 which is coupled to system memory 206. 
An integrated drive electronics (IDE) device controller 220, and a PCI bus bridge 212 are 
connected to PCI bus bridge 204 utilizing PCI bus 208. IDE controller 220 provides for 
the attachment of IDE compatible storage devices such as fixed disk drive 222. PCI 
bridge 212 includes power management logic. 

An I/O controller 218 is coupled to PCI bridge controller 212 and docking 
connector 210. I/O controller 218 controls communication between PCI bridge controller 
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212 and devices and peripherals such as floppy drive 224, keyboard 32, and mouse 36, so 
that these devices may communicate with CPU 200. 



\ PCI bridge controller 212 includes an interface for a flash memory 242 which 
includes microcode which executed upon power-on. Flash memory 242 is an electrically 
erasable progranrai&ble read only memory (EEPROM) module and includes BIOS (basic 
input/output systefai) that is used to interface between the I/O devices and operating 
system. PCI brifcige controller 212 also includes storage 213, which is preferably 
implemented u/ilizing CMOS storage, that holds the BIOS settings. Storage 213 includes 
values whichflescribe the present configuration of the system. For example, storage 213 
includes infprmation describing the list of initial program load (IPL) devices set by a user 
and the sequence to be used for a particular power method, the type of display, the 
amount of memory, time/date, etc. Furthermore, this data is stored in storage 213 
whenever a special configuration program, such as configuration/setup is executed. PCI 
controner 212 is supplied power fi-om battery 244 to prevent loss of configuration data in 
storage 213. 

Portable computer 30 includes a video controller 246 which is coupled to docking 
connector 210. Video controller 246 is connected to video memory 248. The image in 
video memory 248 is read by controller 246 and displayed on display 34. 

Portable computer 30 includes a battery 240 which supplies full normal system 
power 243. A system management bus (SM) 238 is included and is coupled to a docking 
connector 210. System management bus 238 is a two-wire, low-speed serial bus used to 
interconnect management and monitoring devices. 

Portable computer 30 further includes a command control unit (COM) 300 coupled 
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to PCI bus 208, and PCI bridge and power management unit 212. Figure 3 depicts a 
block diagram of command control unit 300 in more detail. As shown, command control 
unit 300 includes control logic 302 coupled to GPS (global position system) control 304, 
cellular communication control 306, and storage 308. The basic operations of GPS 
control 304 and cellular communication control 306 occur as is standardly understood. 
The present invention utilizes the features of the GPS control 304 and cellular control 306 
in an effective manner to provide anti-theft security in the portable computer 30. 

The Global Positioning System (GPS) is an accurate, three-dimensional navigation 
system. The GPS includes a constellation of twenty-one satellites and three spares that 
orbit the earth twice a day at an altitude of 10,898 miles. The satellites orbit the earth in 
six overlapping orbital planes which are based on die equatorial plane of the earth. The 
orbits of the satellites enable any GPS receiver near the surface of the earth to receive 
signals from at least four satellites at any one time, although precise position information 
can be obtained with only three satellites. A GPS receiver can be located in mobile units 
such as aircraft or ground vehicles to enable them to precisely locate their global 
positions. Each satellite continuously broadcasts pseudo-random codes at L-band 
frequencies, LI at 1575.42 MHz and L2 at 1227.6 MHz. Each satellite broadcasts a 
slightly different signal and each satellite broadcasts two types of signals. One of these 
signals is referred to as C/A code, which is a signal that can be received by civilian type 
GPS receivers. The other signal is referred to as P code, which is a signal that can be 
received only by military type GPS receivers. 

Ground stations on the earth receive transmissions from the satellites. These 
transmissions are analyzed and GPS time is compared with universal standard time at the 
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ground stations. Corrections are transmitted to receivers in each of the satellites from the 
ground station. The signals, which include the time the signal left the satellite, are 
broadcast from the satellites and decoded by the GPS receiver using triangulation 
techniques provided by software in the receiver to determine the location. Specifically, 
the interval between the transmission and the reception of the satellite signal is used to 
calculate the unit's distance from each of the satellites being used. Those distances are 
used in the algorithms to compute the receiver's position. 

The present invention provides the ability to track the position of the portable 
computer 30 relative to preset boundary conditions as a component of achieving anti-theft 
security for the portable computer 30. Figure 4 illustrates a flow diagram of a method for 
establishing the preset boundary conditions in accordance with the present invention. The 
process initiates with a prompting for the boxmdary condition (step 400). By way of 
example, a predetermined distance value relative to a central position in terms of a 
suitable measurement, such as miles or kilometers, could be used to give a radius or 
quadrant within which the portable computer 30 is authorized for use. The action(s) to be 
taken when an out-of-boundary condition occurs are then specified in response to a prompt 
(step 402). An out-of-boundary condition is indicated by the setting of an out-of-range bit 
(309) in storage 308 when the system is out-of-area. There are many possibilities for the 
action(s) taken in response to an out-of-boundary condition. A response that utilizes the 
cellular control 306 to initiate a phone call when the out-of-boundary condition occurs is 
an illustrative example of a default response. In order to be able to place a call, an 
emergency phone number is required. Thus, for step 402, a prompt is provided that 
requests an emergency phone number to be entered. Another response includes the 
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disablement of the computer via signalling of a Disable signal by COM 300 (Fig. 2) when 
an out-of-boundary condition occurs. To counteract the disablement, a user supplies a 
password, i.e., a privilege access password (PAP) that is known only by the system owner 
to control key system settings. For step 402, therefore, a prompt for the entering of a 
PAP is provided. Storage of the boundary conditions and out-of-boundary action(s) 
occurs through storage component 308 of COM unit 300 (step 404) to complete the 
establishment of the boundary conditions. 

With the boundary conditions established, they may be utilized for a boundary 
check via COM control unit 300, as described with reference to the flow diagram of 
Figure 5. When the boundary check facility has been enabled in the portable computer 
30, as determined via step 500, the boundary conditions and out-of-boundary action(s) are 
retrieved from storage 308 (step 502). A current position of the portable computer 30 as 
identified by the GPS control 304 is then obtained (step 504). When the portable 
computer 30 is in range, as determined via step 506, no action is necessary. When the 
portable computer is out-of-range, and the preset boundary condition has been violated, 
the preset out-of-boundary action(s) are then performed (step 508). In the illustrative 
embodiment, the cellular command unit is signalled to call the emergency phone number 
retrieved in step 502 and the current physical location is sent to that number. The location 
may be sent as a data stream using facsimile protocol or as pulse modulated data. 

Referring now to Figure 6, in terms of the portable computer 30, the boundary 
check initiates with the execution of POST (power-on self test) process (step 600). When 
the boundary check facility is not enabled, as determined in step 602, the POST process is 
completed and the portable computer is booted (step 604). When the boundary check 
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facility is enabled, the GPS position is obtained (step 606) and the boundary condition is 
obtained (step 608), so that the check of the position relative to the boundary condition 
may be performed in step 610. When the portable computer remains in-bounds, the POST 
process completes and the boot process ensues (step 604). When an out-of-bounds 
condition is determined via step 610, a prompt for entering of the PAP is provided (step 
612). When the password entered matches the PAP, as determined via step 614, the 
POST process is completed and the boot process follows (step 604). When the password 
entered does not match the master/control password, the portable computer performs the 
configured action, e.g., utilizes the emergency number to perform a call-in and report its 
location. Of course, a wrong password also capably restricts further access to the 
computer. 

In addition to the effective comparison of a current position to preset boundary 
conditions to assist in controlling against theft in the present invention, the possibility 
exists that a portable computer may remain within the preset boundary conditions and yet 
be stolen. Therefore, in accordance with a ftirther aspect of the present invention, while 
the boundary check facility is enabled, a call is made from the portable computer 30 via 
the COM control unit 300 to a preset phone number, e.g., the emergency phone number, 
at preset intervals, such as once a day. The call provides information that identifies the 
portable computer and the location of the portable computer based on the GPS data. 
Thus, if the portable computer 30 remains 'in-bounds' but is stolen, the scheduled 
reporting feature of the present invention allows the location of the stolen computer to be 
reported. Of course, in order to change the frequency of the scheduled call-in or to 
disable the feature would require the PAP, and thus, perpetrators would be unable to 
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counteract the function. 

Although the present invention has been described in accordance with the 
embodiments shown, one of ordinary skill in the art will recognize that there could be 
variations to the embodiment and those variations would be withm the spirit and scope of 
the present invention. Accordingly, many modifications may be made by one of ordinary 
skill widiout departing from the spirit and scope of the present invention, the scope of 
which is defined by the following claims. 
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